HTTPS and Application Links?

[Timothy Harris]

I have Confluence and JIRA running on the same machine. I want them both running HTTPS/SSL. 

Do I need to generate a key and Keystore for each?

keytool -genkeypair -alias tomcat -keyalg RSA -keystore /var/atlassian/atlassianConfluence.keystore

keytool -genkeypair -alias jira -keyalg RSA -keystore /var/atlassian/atlassianJira.keystore

Can they use the same keystore but with different alias?

The Confluence guide says to use alias "tomcat". Does it make a difference what the alias is?

Meaning if I generate the keys with different alias's(confluence and jira) and get them signed I can then import the different key chains and use the same keystore.

How does this affect application links?

[Volodymyr Krupach]

Hi Timothy!

> Can they use the same keystore but with different alias?

I think they can, but I recommend to go with one SSL for booth. Also it make sense to configure Apache as reverse proxy, so JIRA and Confluence will be accessible in intranet like: https://youserver.yourintranet.com/jira and  https://youserver.yourintranet.com/confluence

With Apache you will need to configure SSL only on Apache level and not need to do SSL configurations in JIRA and Confluence tomcats. Also direct JIRA and Confluence http Tomcat ports should be closed on you server level. Instructions from atlassian: https://confluence.atlassian.com/display/JIRA/Integrating+JIRA+with+Apache